$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer File: 9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer (raw, json) Hash identifier: bhkpRs/lKYrHDmZzLOH1tTEh7XN2o4elkSCNd4SkaPg= Subject key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 51218A23767F19EC4A80B7B95BED95D915A96FC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 08:20:55 +0000 Certificate not after: Thu 27 May 2027 08:25:55 +0000 Subordinate resources: AS: 151291 IP: 49.128.4.0/22 IP: 103.31.236.0/22 IP: 103.244.116.0/22 IP: 223.29.252.0/22 IP: 2403:6380::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:21:8a:23:76:7f:19:ec:4a:80:b7:b9:5b:ed:95:d9:15:a9:6f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 08:20:55 2026 GMT Not After : May 27 08:25:55 2027 GMT Subject: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:a1:ca:9b:b4:51:7e:d1:73:76:24:90:84: d9:a2:8a:0d:fa:5a:f6:46:d6:d8:4e:d6:07:2c:5a: 0d:94:1a:73:d1:8c:48:fc:67:8b:22:bb:71:7c:f3: 3e:a3:ed:bc:9e:37:5b:86:c3:1a:e1:5c:9c:5f:5d: 06:99:6c:86:70:ce:34:69:ce:7a:9a:14:a5:2b:a2: 57:8a:eb:de:a6:e6:1c:6e:94:84:6a:4e:65:1b:12: 74:ae:3f:63:62:e2:95:9e:48:4b:3c:f1:87:35:9b: 16:27:1d:24:b0:23:ac:99:1a:85:b2:35:a5:37:8c: 67:b8:da:ae:40:e6:a7:62:8e:e3:9e:fc:be:ce:4f: 2e:f6:be:d0:ca:16:59:48:4d:89:d0:c2:36:da:27: 5b:db:8b:33:b7:65:64:93:d9:89:64:63:97:cd:f3: 19:f4:11:2d:2b:68:db:ae:a3:94:7f:9e:74:a5:45: 4a:9f:7e:44:65:2f:f6:e0:6f:52:b8:aa:3d:62:4f: 71:22:75:06:e5:1c:65:7e:a4:d8:c4:a3:83:9e:bd: 8b:fc:af:48:d0:1a:50:b7:6d:b6:3f:27:98:40:e3: cc:88:47:9c:ad:e4:ef:b0:51:83:79:42:98:5d:27: a6:6f:05:bc:48:e2:57:30:e2:93:90:19:f1:84:f8: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.4.0/22 103.31.236.0/22 103.244.116.0/22 223.29.252.0/22 IPv6: 2403:6380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151291 Signature Algorithm: sha256WithRSAEncryption 43:f3:5b:7d:4f:44:75:96:1a:a5:57:b8:96:df:94:4c:52:3b: 99:f1:d8:2f:39:cb:ad:ea:50:41:5e:70:9f:23:f2:f6:60:31: fa:41:e5:da:ca:b2:fd:b4:7e:da:49:97:e3:ca:e9:29:e5:93: 95:6d:75:59:4c:e2:b4:ea:c5:2b:22:34:b6:a9:d5:da:c6:89: 4f:e0:a5:34:d1:9f:77:a9:2c:ee:1f:f6:fb:b2:af:73:23:a1: 74:12:62:b1:c5:1c:12:33:4a:b3:c6:e5:32:f2:34:08:91:47: 2c:b8:1f:62:3e:63:5d:f8:ec:d4:5b:81:1e:29:1f:b7:1b:9a: 69:69:5b:8a:b4:79:35:ed:58:da:cc:55:5b:fd:97:c7:05:54: da:02:a4:0b:08:01:88:3f:20:35:80:5a:7f:74:db:c3:1e:82: e0:be:86:6f:1f:30:0e:48:d0:aa:d6:6e:45:b4:83:42:b4:a1: 71:25:05:ae:99:14:70:76:53:7c:31:6c:74:b4:9f:b5:ca:48: b8:2e:5d:13:93:3e:48:37:64:bb:51:40:e4:31:41:e6:ae:b0: da:9d:bc:0b:ae:01:c7:27:a8:7e:4f:75:b9:b0:f6:43:4b:f5: fa:10:2e:5f:28:6c:22:77:25:6f:6c:68:42:34:7c:2d:29:b5: a4:40:8f:dd -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUUSGKI3Z/GexKgLe5W+2V2RWpb8EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4MjA1NVoX DTI3MDUyNzA4MjU1NVowMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQy RDgxQTdGNTA4NDMzOERCQzVDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMA4ocqbtFF+0XN2JJCE2aKKDfpa9kbW2E7WByxaDZQac9GMSPxniyK7cXzz PqPtvJ43W4bDGuFcnF9dBplshnDONGnOepoUpSuiV4rr3qbmHG6UhGpOZRsSdK4/ Y2LilZ5ISzzxhzWbFicdJLAjrJkahbI1pTeMZ7jarkDmp2KO4578vs5PLva+0MoW WUhNidDCNtonW9uLM7dlZJPZiWRjl83zGfQRLSto266jlH+edKVFSp9+RGUv9uBv UriqPWJPcSJ1BuUcZX6k2MSjg569i/yvSNAaULdttj8nmEDjzIhHnK3k77BRg3lC mF0npm8FvEjiVzDik5AZ8YT4vUMCAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ5764ECMzaaR9Qtgaf1CEM428XIMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MDA1NTEyMTgyMTY5OC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxODIxNjk4 LzAvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAIxgAQDBAJnH+wDBAJn9HQDBALfHfwwDQQCAAIw BwMFACQDY4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAk77MA0GCSqGSIb3DQEB CwUAA4IBAQBD81t9T0R1lhqlV7iW35RMUjuZ8dgvOcut6lBBXnCfI/L2YDH6QeXa yrL9tH7aSZfjyukp5ZOVbXVZTOK06sUrIjS2qdXaxolP4KU00Z93qSzuH/b7sq9z I6F0EmKxxRwSM0qzxuUy8jQIkUcsuB9iPmNd+OzUW4EeKR+3G5ppaVuKtHk17Vja zFVb/ZfHBVTaAqQLCAGIPyA1gFp/dNvDHoLgvoZvHzAOSNCq1m5FtINCtKFxJQWu mRRwdlN8MWx0tJ+1yki4Ll0Tkz5IN2S7UUDkMUHmrrDanbwLrgHHJ6h+T3W5sPZD S/X6EC5fKGwidyVvbGhCNHwtKbWkQI/d -----END CERTIFICATE-----Generated at Thu Jun 11 20:53:26 2026 by rpki-client